Описание
Remote code execution in Voyager
Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.
Пакеты
Наименование
tcg/voyager
composer
Затронутые версииВерсия исправления
<= 1.4.0
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
почти 3 года назад
Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.